Merge "Support for mariadb's ed25519 authentication"

deployment/database/mysql-base.yaml

@@ -53,6 +53,11 @@ parameters:
   EnableInternalTLS:
     type: boolean
     default: false
+  EnableMysqlAuthEd25519:
+    type: boolean
+    description: Whether to configure MySQL users to connect to the
+                 server using the Ed25519-based client authentication.
+    default: false
   MysqlIPv6:
     default: false
     description: Enable IPv6 in MySQL
@@ -89,6 +94,7 @@ outputs:
                     - {get_param: [DefaultPasswords, mysql_root_password]}
             mysql_clustercheck_password: {get_param: MysqlClustercheckPassword}
             enable_galera: {get_param: EnableGalera}
+            mysql_auth_ed25519: {get_param: EnableMysqlAuthEd25519}
             # NOTE: bind IP is found in hiera replacing the network name with the
             # local node IP for the given network; replacement examples
             # (eg. for internal_api):

releasenotes/notes/mysql-auth-ed25519-28aaea4e69fbfdf7.yaml

@@ -0,0 +1,7 @@
+---
+features:
+  - |
+    Add Heat parameter ``EnableMysqlAuthEd25519``, which when set to
+    true, configures MySQL user credentials to require ed25519-based
+    authentication to the mariadb server, instead of the default
+    SHA1-based native authentication.